HARDRAIN is a Trojan malware variant reportedly used by the North Korean government. - <https://attack.mitre.org/software/S0246/>

HotCroissant is a remote access trojan (RAT) attributed by U.S. government entities to malicious North Korean government cyber activity, tracked collectively as HIDDEN COBRA. HotCroissant shares numerous code similarities with Rifdoor. - <https://attack.mitre.org/software/S0431/>